Our High-Performing Core Network

Fully virtualizable on VMware, K8S, Docker and OpenStack containers

N3IWF (Non-3GPP InterWorking Function)

N3IWF (Non-3GPP InterWorking Function) is responsible for connecting untrusted non-3GPP access network to 5GC. UE and N3IWF establish an IPSec tunnel, N3IWF connects to the User Plane and Control Plane of 5GC through N2 interface and N3 interface separately.

Key Benefits

380cf5e734

Support both 3GPP access network and non-3GPP access network

773702f2c1

Flexible and balanced traffic load scheduling

bb51ab3644

Support satellite access

ce24ac166d

High traffic transmission

5GC Integrated with Satellite Technology

  • The core network of satellite communication system adopts the same architecture as the ground 5GC. The network functions located in the control plane provide service functions through service-based interfaces, and other network functions can reuse the service functions of a certain network function.
    In addition to the basic services provided by 3GPP, in order to support the integration with the ground, it is necessary to add N3IWF network functions on the user plane of 5G Satellite Core Network:
  • Support the establishment of IPSec Security Association (IPsec SA) with UE, forward the NAS signal of uplink and downlink control plane between UE and AMF, forward packets of uplink anddownlink user plane between UE and UPF, perform N3 packet marking corresponding to QoS, and perform local mobile anchor function in non 3GPP access network.

Video Series

Features

Comply to 3GPP R15/R16 Standards

Interface Function

Support the establishment of IPSec tunnel with UE

Provide NWU interface using IKEv2 / IPSec protocol

Forwards UE authentication information to the core network through N2 interface

Forward the uplink and downlink N1 messages (NAS signalling) between UE and AMF

Establish IPSec Security Association (IPSec SA) to forward PDU session user data

Process N2 session / QoS PDU control plane messages sent from SMF

Forward the uplink and downlink data between UE and UPF

Encoding / decoding of IPSec and N3 data

Support the QoS control of N3 interface

Support N3 uplink packet marking

Support local anchors

Support AMF selection

Support AMF selection

FAQ

What is the primary role of the N3IWF in a 5G network?

The N3IWF is responsible for connecting untrusted non-3GPP access networks (such as public Wi-Fi or satellite networks) to the 5G Core (5GC). It acts as a gateway that allows the 5G network to treat non-3GPP access similarly to standard 3GPP RAN access.

Security is maintained through the establishment of an IPSec tunnel using the IKEv2 protocol. This ensures that all signaling and data traffic coming from an untrusted network is encrypted and secure before it enters the 5G Core.

The N3IWF utilizes two main interfaces:
N2 Interface: Used for the Control Plane to connect to the AMF (Access and Mobility Management Function).
N3 Interface: Used for the User Plane to connect to the UPF (User Plane Function).

The N3IWF forwards uplink and downlink N1 messages (NAS signaling) between the UE and the AMF. It encapsulates these messages within the IPSec tunnel to ensure they are securely transmitted from the UE to the core network.

In satellite-integrated 5G systems, the N3IWF is essential for ground-to-satellite integration. It supports the establishment of IPSec Security Associations (SA) with the UE and performs N3 packet marking to ensure appropriate Quality of Service (QoS) across the satellite link.

Yes. The N3IWF processes N2 session and QoS PDU control messages sent from the SMF (Session Management Function). it also supports N3 uplink packet marking and encoding/decoding of IPSec and N3 data to maintain service quality.

The N3IWF solution is fully compliant with 3GPP R15 and R16 standards, ensuring compatibility with modern 5G core network deployments and multi-vendor environments.

Yes, the N3IWF supports AMF selection. When a UE connects via a non-3GPP access network, the N3IWF helps route the initial signaling to the correct AMF within the core network.

The N3IWF provides a graphical web-based management interface for configuration and monitoring. Additionally, it supports RESTful APIs, allowing for easy integration with external orchestration and management systems.

Yes, the N3IWF can perform the local mobile anchor function within the non-3GPP access network. This helps manage traffic locally and can improve efficiency for data transmission when the UE is connected through these alternative access points.

Related Products